46 matches found
EUVD-2017-15099
Malware in sbrugna...
EUVD-2011-4790
Malware in sbrugna...
EUVD-2017-15097
Malware in sbrugna...
CVE-2011-4882
The web server in Certec atvise webMI2ADS aka webMI before 2.0.2 allows remote attackers to cause a denial of service application exit via an unspecified command in an HTTP request...
CVE-2011-4881
The web server in Certec atvise webMI2ADS aka webMI before 2.0.2 does not properly check return values from functions, which allows remote attackers to cause a denial of service NULL pointer dereference via a crafted HTTP request...
CVE-2011-4873
Unspecified vulnerability in the server in Certec EDV atvise before 2.1 allows remote attackers to cause a denial of service daemon crash via crafted requests to TCP port 4840...
CVE-2011-4883
The web server in Certec atvise webMI2ADS aka webMI before 2.0.2 does not properly validate values in HTTP requests, which allows remote attackers to cause a denial of service resource consumption via a crafted request...
CVE-2011-4880
Directory traversal vulnerability in the web server in Certec atvise webMI2ADS aka webMI before 2.0.2 allows remote attackers to read arbitrary files via a crafted HTTP request...
Certec Atvise Server Remote DOS
Overview Independent researcher Luigi Auriemma has identified a denial of service DoS vulnerability in Certec EDV GmbH atvise application. Certec has produced an update that resolves this vulnerability. Mr. Auriemma validated that the update resolves the vulnerability. Affected Products Atvise...
CVE-2017-6031
A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. An "improper neutralization of HTTP headers for scripting syntax" issue has been identified, which may allow remote code execution...
Design/Logic Flaw
A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. An "improper neutralization of HTTP headers for scripting syntax" issue has been identified, which may allow remote code execution...
CVE-2017-6029
A Cross-Site Scripting issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. This may allow remote code execution...
Cross site scripting
A Cross-Site Scripting issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. This may allow remote code execution...
CVE-2017-6029
A Cross-Site Scripting issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. This may allow remote code execution...
CVE-2017-6031
CVE-2017-6031 affects Certec EDV GmbH atvise scada pre-3.0. The issue is improper neutralization of HTTP headers for scripting syntax (header injection) that may enable remote code execution. Affected: atvise scada prior to version 3.0; exploitability is remotely possible. Mitigation: upgrade to ...
CVE-2017-6031
A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. An "improper neutralization of HTTP headers for scripting syntax" issue has been identified, which may allow remote code execution...
CVE-2017-6029
A Cross-Site Scripting issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. This may allow remote code execution...
CVE-2017-6029
CVE-2017-6029 affects Certec EDV GmbH atvise SCADA prior to version 3.0, describing two related issues: a Cross-Site Scripting vulnerability (CWE-79) and a header injection bug (CWE-644) that together may enable remote code execution. The NVD entry confirms the XSS as the primary CVE-2017-6029 it...
Certec EDV GmbH atvise scada cross-site scripting vulnerability
Certec EDV GmbH is based in Austria. atvise is a web-based HMI monitoring and data acquisition system. A cross-site scripting vulnerability exists in Certec EDV GmbH atvise scada. An attacker may be able to exploit this vulnerability to execute arbitrary script code in the browser of an...
Certec EDV GmbH atvise scada
CVSS v3 6.1 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Certec EDV GmbH Equipment: atvise scada Vulnerabilities: Cross-Site Scripting, Header Injection AFFECTED PRODUCTS The following versions of atvise scada, a HMI configuration platform, are affected: Atvise scada 3.0 an...